hillow.org

Privacy Policy

Effective date: 7/1/26 Last updated: 7/6/26

1. Who we are

This Privacy Policy explains how Hillow.org handles information for the website hillow.org and all of its subdomains, sub‑sites, and self‑hosted applications (collectively, the "Service"). A single sign‑on account may give you access to multiple applications under this domain; this Policy applies to all of them unless a specific application shows its own additional notice.

This is a small, privately operated, hobby/personal service. It is run by an individual, is not a commercial enterprise, and is advertised to a limited number of users, yet it is open to anyone (primarily friends, family, and invited guests). We keep data collection to the minimum needed to operate.

Contact: [email protected]

2. Information we collect

2.1 Information you provide

Account information — when you register or sign in, we store your username, email address, display name, and (for local accounts) a securely hashed password. We do not store plaintext passwords.
Content you create or upload — depending on which applications you use, this may include files and documents, photos and videos, notes and tasks, calendar entries, bookmarks, recipes, and other content you choose to store.
Sensitive content you choose to store — some applications on the Service are designed to hold sensitive personal information, for example health or fitness data, location history, or credentials stored in a password manager. You provide this voluntarily and only if you choose to use those specific applications. We treat such data as private to your account and do not access it except as needed to operate, back up, or secure the Service. Password‑manager vault contents are end‑to‑end encrypted and are not readable by us.
Payment information (only if you choose to pay or donate) — if you buy a subscription or additional storage, or make a voluntary donation, our payment processor Stripe collects your payment details directly. We do not receive or store your card number, CVC, or bank details. We keep only limited billing records (for example, that a payment was made, the amount, the date, and a masked card brand/last‑four). See Section 13.
Communications — if you email us or submit a request, we keep that message.

What we do not collect: We do not collect biometric identifiers or biometric information (such as faceprints, fingerprints, or voiceprints); no application on the Service performs facial recognition or other biometric identification. We also do not collect government‑ID numbers or precise, always‑on background location.

2.2 Information collected automatically

Server logs — our web server records standard access logs for each request, including your IP address, the date and time, the page or resource requested, the HTTP status, the referring page, and your browser's user‑agent string. These logs are used for security, abuse prevention, and troubleshooting.
Authentication logs — our identity provider records sign‑in events (such as login attempts, successes/failures, and the IP address used) to protect your account.
Content‑delivery / security provider — the Service sits behind Cloudflare, which processes your IP address and connection metadata to deliver content, provide TLS encryption, and protect against attacks. See Cloudflare's own privacy notice for details: https://www.cloudflare.com/privacypolicy/

2.3 Cookies and similar technologies

We use strictly necessary cookies only. These are essential session and authentication cookies (for example, the single sign‑on session cookie and per‑application login cookies) that keep you logged in and secure your session. Some applications may set functional cookies to remember preferences (such as theme or language).

We do not use advertising cookies, cross‑site tracking, analytics profiling, or third‑party marketing trackers. Because our cookies are strictly necessary to provide a service you request, they are required for the Service to function; disabling them may prevent you from logging in.

2.4 Do Not Track and Global Privacy Control

Because we do not track you across other websites or services and do not serve behavioral advertising, there is nothing to opt out of. We therefore treat all users the same and do not change our behavior based on "Do Not Track" (DNT) or Global Privacy Control (GPC) browser signals — we simply do not perform the kind of tracking those signals are meant to stop.

3. How we use information

We use the information above only to:

create and maintain your account and authenticate you;
provide, operate, and maintain the applications you use;
store and display the content you upload back to you;
secure the Service, prevent abuse, and diagnose problems;
back up data so the Service can be restored after a failure;
respond to your questions and requests;
comply with law where required.

We do not use your content to build advertising profiles, and we do not perform automated decision‑making that produces legal effects about you.

4. Signing in with a third‑party account (OAuth)

You may choose to sign in using a third‑party account instead of, or in addition to, a local password. When you do, that provider shares a limited set of profile information with us — typically your name or username, email address, and profile picture — solely so we can create or match your account and log you in. We use this information only for authentication and account management, and we never receive the password you use with that provider. We currently support, or may support, the following sign‑in providers:

Google
Microsoft
Discord
Telegram (note: Telegram shares your Telegram ID, name, username, and photo, and does not necessarily provide an email address)
any extra providers named under https://auth.hillow.org

You can review or revoke our access at any time from within that provider's connected‑apps / permissions settings. Revoking access does not delete data already stored in your account here; to remove that, delete your account or contact us (see Section 8).

4.1 Google API Limited Use

If you sign in with Google, Google shares your name, email address, and profile picture with us. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we:

use Google user data only to provide and improve the sign‑in and account features you request;
do not sell Google user data;
do not transfer or use it for advertising; and
do not allow humans to read it except with your consent, for security, to comply with law, or as strictly necessary to operate the Service.

You can review or revoke our access at any time at myaccount.google.com/permissions. Revoking access does not delete data already stored in your account here; to remove that, delete your account or contact us (see Section 8).

5. How we share information

We do not sell your personal data, and we do not share it with third parties for their own marketing. We share information only in these limited cases:

Infrastructure providers (processors) that help us run the Service — for example Cloudflare (content delivery, TLS, security). These providers process data on our behalf and are not permitted to use it for their own purposes beyond providing their service.
Payment processor — if you make a payment or donation, Stripe processes your payment details on our behalf (see Section 13). We do not receive or store your full card number.
Legal requirements — if we are required by valid legal process to disclose information, or where disclosure is necessary to protect the rights, safety, or property of ourselves, our users, or the public.
With your direction — if you deliberately share content with other users or make it public through a feature of an application.

Most of the Service is self‑hosted on our own hardware; your content generally is not handed to outside companies.

6. Data retention and deletion

We retain your account and content for as long as your account is active.
When you delete your account or specific data (or ask us to), we remove it from our active systems promptly. Copies may persist in our encrypted backups, which are rotated and permanently overwritten within 90 days. After that window it is no longer recoverable.
We may retain minimal records (such as security logs) for a limited period where necessary for security, abuse prevention, or legal compliance.

7. Security

We protect the Service with measures including TLS/HTTPS encryption in transit, hashed password storage, access controls, single sign‑on, and admin‑gated access to non‑public areas. However, no method of transmission or storage is perfectly secure. We cannot guarantee absolute security, and you use the Service at your own risk (see also our disclaimer of data loss in Section 9 and in the Terms of Service).

Breach notification. If we become aware of a security breach that compromises your personal information, we will notify you and any regulators as required by applicable law, without undue delay, using the email address associated with your account.

8. Your rights and choices

Regardless of where you live, we offer all users the following:

Access — request a copy of the personal data we hold about you.
Correction — ask us to fix inaccurate information (you can also edit most of it in your account settings).
Deletion — delete your account and content, or ask us to (subject to the 90‑day backup window in Section 6).
Portability / export — many applications let you export your own content directly; otherwise contact us.
Withdraw consent — where we rely on your consent (for example, Google Sign‑In or storing sensitive data), you can withdraw it by stopping use of that feature and deleting the associated data.
Authorized agent — you may use an authorized agent to submit a request on your behalf; we may ask for proof of authorization and to verify your identity.
Appeal — if we deny your request, you may appeal by replying to our decision or emailing [email protected]; we will respond with the outcome and reasons.

To exercise any of these, email [email protected]. We will respond within a reasonable time. We will not discriminate against you for exercising these rights.

We do not sell your personal information, and we do not "share" it for cross‑context behavioral advertising, as those terms are defined under U.S. state privacy laws such as the California Consumer Privacy Act. We also do not use or disclose sensitive personal information for any purpose other than operating and securing the Service.

Sensitive and consumer health data: Some applications can hold health, fitness, location, or other sensitive information that may qualify as "consumer health data" under laws such as the Washington My Health My Data Act. We collect such data only when you voluntarily enter it into an application you choose to use, we use it only to provide that application to you, we do not sell or share it, and you may delete it at any time.

9. Availability and no guarantee of data preservation

This is a hobby service provided on a best‑effort, "as‑is" basis. The Service, or any application within it, may be slowed, interrupted, modified, or permanently shut down at any time, with or without notice. We are not responsible for any loss, corruption, or deletion of your data. You are responsible for keeping your own independent backups of anything important to you. This is explained further in our Terms of Service.

10. Children's privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from anyone. Consistent with the U.S. Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under

If you believe a child has provided us personal information, contact us and we will

delete it.

11. International users

The Service is hosted on our own hardware in the United States. If you access it from outside the United States, you understand your information will be processed there.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will change the "Last updated" date above and, for material changes, make reasonable efforts to notify account holders. Continued use of the Service after changes take effect means you accept the updated Policy.

13. Payments and donations

The core Service is free. In the future we may offer optional paid features — for example a monthly subscription, additional cloud storage, or the ability to make a voluntary donation. If we do:

All payments are processed by Stripe. You enter your card or payment details directly with Stripe, and Stripe — not us — collects and stores that information. We never see or store your full card number, CVC, or bank details.
From Stripe we receive only limited, non‑sensitive confirmation data needed to provide what you paid for and keep basic records — for example that a payment succeeded, the amount, the date, a masked card brand/last‑four, and a Stripe customer or subscription identifier. We use this only to activate your subscription or storage, prevent fraud, provide receipts, and meet tax and accounting obligations.
We do not collect, store, or have access to your payment card details. Paying is always optional, and paid features are never required to use the core Service.
Stripe handles your payment information under its own privacy policy: https://stripe.com/privacy

Donations are voluntary, non‑refundable gifts; they do not purchase any product or service or guarantee continued availability of the Service.

14. Contact

Questions, requests, or complaints about this Policy or your data:

hillow (operating as hillow.org) Email: [email protected] Website: https://hillow.org